CrowdStrike Certified Falcon Responder (CCFR) — Question 36

You can jump to a Process Timeline from many views, like a Hash Search, by clicking which of the following?

Answer options

• A. ProcessTimeline Link
• B. PID
• C. UTC time
• D. Process ID or Parent Process ID

Correct answer: D

Explanation

The correct answer is D, as both the Process ID and Parent Process ID provide direct links to the Process Timeline. Options A, B, and C do not specifically lead to the Process Timeline, making them incorrect in this context.